DLA-3642-1 request-tracker4 - security update

Bulletin has no description...

Debian dla-3642 : request-tracker4 - security update

The remote Debian 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-3642 advisory. - ------------------------------------------------------------------------- Debian LTS Advisory DLA-3642-1 [email protected]...

Debian DSA-5541-1 : request-tracker5 - security update

The remote Debian 12 host has packages installed that are affected by multiple vulnerabilities as referenced in the dsa-5541 advisory. - Request Tracker reports: CVE-2023-41259 SECURITY: RT is vulnerable to unvalidated email headers in incoming email and the mail-gateway REST interface...

[SECURITY] [DLA 3641-1] jetty9 security update

Debian LTS Advisory DLA-3641-1 [email protected] https://www.debian.org/lts/security/ Markus Koschany October 30, 2023 https://wiki.debian.org/LTS Package : jetty9 Version : 9.4.50-4+deb10u1 CVE ID : CVE-2020-27218 CVE-2023-36478 CVE-2023-44487 Debian Bug : 976211 Two remotely exploitab...

[SECURITY] [DLA 3639-1] distro-info-data database update

Debian LTS Advisory DLA-3639-1 [email protected] https://www.debian.org/lts/security/ Stefano Rivera October 30, 2023 https://wiki.debian.org/LTS Package : distro-info-data Version : 0.41+deb10u8 This is a routine update of the distro-info-data database for Debian LTS users. It includes...

PT-2023-6715 · Unknown +2 · Request Tracker +2

Name of the Vulnerable Software and Affected Versions: Request Tracker RT versions 4.4.6 and earlier Request Tracker RT versions 5.x prior to 5.0.5 Description: The issue allows information exposure in responses to mail-gateway REST API calls. This is due to excessive data output by the applicati...

PT-2023-6733 · Best Practical +2 · Request Tracker +2

Name of the Vulnerable Software and Affected Versions: Best Practical Request Tracker RT versions 4.4.6 and earlier Best Practical Request Tracker RT versions 5.0.4 and earlier Description: The issue allows Information Disclosure via fake or spoofed RT email headers in an email message or a...

PT-2023-29363 · Best Practical · Request Tracker

Name of the Vulnerable Software and Affected Versions: Best Practical Request Tracker RT versions 5.0.0 through 5.0.4 Description: The issue allows Information Disclosure via a transaction search in the transaction query builder. Recommendations: For versions 5.0.0 through 5.0.4, update to versio...

[SECURITY] [DLA 3634-1] nss security update

Debian LTS Advisory DLA-3634-1 [email protected] https://www.debian.org/lts/security/ Sean Whitton October 28, 2023 https://wiki.debian.org/LTS Package : nss Version : 2:3.42.1-1+deb10u7 CVE ID : CVE-2020-25648 CVE-2023-4421 Multiple vulnerabilities were found in nss, a set of libraries...

[SECURITY] [DLA 3633-1] gst-plugins-bad1.0 security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-3633-1 [email protected] https://www.debian.org/lts/security/ Thorsten Alteholz October 28, 2023 https://wiki.debian.org/LTS -...

[SECURITY] [DSA 5535-1] firefox-esr security update

------------------------------------------------------------------------- Debian Security Advisory DSA-5535-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff October 25, 2023 https://www.debian.org/security/faq -...

[SECURITY] [DSA 5533-1] gst-plugins-bad1.0 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-5533-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso October 24, 2023 https://www.debian.org/security/faq -...

Updated libcue packages fix a security vulnerability

Versions 2.2.1 and prior are vulnerable to out-of-bounds array access. A user of the GNOME desktop environment can be exploited by downloading a cue sheet from a malicious webpage. Because the file is saved to /Downloads, it is then automatically scanned by tracker-miners. And because it has a .c...

OESA-2023-1744 libcue security update

Libcue is intended for parsing a so-called cue sheet from a char string or a file pointer. For handling of the parsed data a convenient API is available. Security Fixes: libcue provides an API for parsing and extracting data from CUE sheets. Versions 2.2.1 and prior are vulnerable to out-of-bound...

Vulnerabilities in Best Practical RT fixed

Vulnerabilities have been fixed in Best Practical Request Tracker RT. The vulnerabilities allow an unauthenticated malicious person able to impersonate an RT user and to download specific email attachments to download. Best Practical has released updates to fix the vulnerabilities fixes in RT. Fo...

FreeBSD : Request Tracker -- multiple vulnerabilities (e14b9870-62a4-11ee-897b-000bab9f87f1)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the e14b9870-62a4-11ee-897b-000bab9f87f1 advisory. - Request Tracker reports: CVE-2023-41259 SECURITY: RT is vulnerable to unvalidated email...

Ubuntu 23.10 : CUE vulnerability (USN-6423-2)

The remote Ubuntu 23.10 host has packages installed that are affected by a vulnerability as referenced in the USN-6423-2 advisory. USN-6423-1 fixed a vulnerability in CUE. This update provides the corresponding updates for Ubuntu 23.10. Tenable has extracted the preceding description block direct...

Request Tracker -- multiple vulnerabilities

Request Tracker reports: CVE-2023-41259 SECURITY: RT is vulnerable to unvalidated email headers in incoming email and the mail-gateway REST interface. CVE-2023-41260 SECURITY: RT is vulnerable to information leakage via response messages returned from requests sent via the mail-gateway REST...

Medicine Tracker System Cross-Site Scripting Vulnerability

Medicine Tracker System is a medication tracking system by Carlo Montero personal developer. Medicine Tracker System v1.0 suffers from a cross-site scripting vulnerability that stems from the lack of effective filtering and escaping of user-supplied data in the parameter page of the file index.ph...

[SECURITY] [DLA 3617-2] tomcat9 regression update

Debian LTS Advisory DLA-3617-2 [email protected] https://www.debian.org/lts/security/ Markus Koschany October 17, 2023 https://wiki.debian.org/LTS Package : tomcat9 Version : 9.0.31-1deb10u10 CVE ID : CVE-2023-44487 A regression was discovered in the Http2UpgradeHandler class of Tomcat ...